> For one you would never allow a client to dictate the query. That is a security and validation problem. So you have to deconstruct the query anyway and then rebuild it.

Every single SQL server allows a client to dictate the query. Furthermore, not all queries are SQL queries.